package SV_CLASSLOADER_INJ;

import javax.servlet.ServletRequest;
import java.net.MalformedURLException;
import java.net.URL;
import java.net.URLClassLoader;

public class Vulnerable {
    public void createContent(final ServletRequest req)
            throws MalformedURLException {

        // Set up external reference to site
        final String urlString = req.getParameter("url.data");
        final URL url = new URL(urlString);
        final URLClassLoader loader = new URLClassLoader(new URL[]{url});
       //...
    }
}
